summaryrefslogtreecommitdiff
path: root/changelogs/unreleased/ssrf-protections.yml
blob: 8d8037380092630ca675d0bc53df5e7cb000bd27 (plain)
1
2
3
4
---
title: To protect against Server-side Request Forgery project import URLs are now prohibited against localhost or the server IP except for the assigned instance URL and port. Imports are also prohibited from ports below 1024 with the exception of ports 22, 80, and 443.
merge_request:
author: